mrclksr / linux-browser-installer

Script to install Linux browsers under a Linux chroot on FreeBSD
165 stars 25 forks source link

Expired certificate and repo issue #19

Open snss806 opened 2 years ago

snss806 commented 2 years ago

Hi @mrclksr !

I was trying to install Vivaldi on GhostBSD but I run into this problem:

/compat/ubuntu/linux_signing_key.pub 3175 B 5761 kBps 00s OK Hit:1 http://archive.ubuntu.com/ubuntu focal InRelease Ign:2 https://repo.vivaldi.com/archive/deb stable InRelease Err:3 https://repo.vivaldi.com/archive/deb stable Release Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 23.111.9.47 443] Reading package lists... Done
E: The repository 'https://repo.vivaldi.com/archive/deb stable Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. Reading package lists... Done Building dependency tree
Reading state information... Done E: Unable to locate package vivaldi-stable linux-browser-installer: Error: 'apt install -y vivaldi-stable' failed

What I did

  1. I followed the instructions specified on README.md;
  2. I run this command: ./linux-browser-installer install vivaldi
  3. The above errors where displayed.
  4. I modified /compat/ubuntu/etc/apt/sources.list.d/vivaldi.list to point to a different repo, but I was unable to update the repo.

Can you please take a look into this issue and let me know if this is a bug or is something that I missed.

Thank you!

Mostly-BSD commented 2 years ago

Here is a simple workaround.

As root user from your FreeBSD box

# First create the chroot
./linux-browser-installer chroot create 
chroot /compat/ubuntu /bin/bash

Inside the chroot add the following 3 repos to the apt sources.

#Inside the chroot
cat <<END >> /etc/apt/sources.list
deb http://archive.ubuntu.com/ubuntu/ focal-updates  main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ focal-backports  main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ focal-security  main restricted universe multiverse
END
apt update && apt -y upgrade
# exit from the chroot
exit

After that install the browser of your choice.

mekanix commented 1 year ago

I always get invalid signature. This is from ./linux-browser-installer chroot create

I: Configuring ubuntu-minimal...
I: Configuring libc-bin...
I: Configuring systemd...
I: Configuring ca-certificates...
I: Base system installed successfully.
mkdir: /compat/ubuntu/etc/localtime: File exists
cp: /compat/ubuntu/etc/localtime is not a directory

Current default time zone: 'Europe/Belgrade'
Local time is now:      Wed Aug  2 11:49:12 CEST 2023.
Universal Time is now:  Wed Aug  2 09:49:12 UTC 2023.

compat.linux.emul_path: /compat/ubuntu -> /compat/ubuntu
Get:1 http://archive.ubuntu.com/ubuntu focal InRelease [265 kB]
Get:2 http://archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Get:3 http://archive.ubuntu.com/ubuntu focal-security InRelease [114 kB]
Err:1 http://archive.ubuntu.com/ubuntu focal InRelease
  At least one invalid signature was encountered.
Err:2 http://archive.ubuntu.com/ubuntu focal-updates InRelease
  At least one invalid signature was encountered.
Err:3 http://archive.ubuntu.com/ubuntu focal-security InRelease
  At least one invalid signature was encountered.
Reading package lists... Done
W: GPG error: http://archive.ubuntu.com/ubuntu focal InRelease: At least one invalid signature was encountered.
E: The repository 'http://archive.ubuntu.com/ubuntu focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://archive.ubuntu.com/ubuntu focal-updates InRelease: At least one invalid signature was encountered.
E: The repository 'http://archive.ubuntu.com/ubuntu focal-updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://archive.ubuntu.com/ubuntu focal-security InRelease: At least one invalid signature was encountered.
E: The repository 'http://archive.ubuntu.com/ubuntu focal-security InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Reading package lists... Done
Building dependency tree... Done
The following packages will be REMOVED:
  rsyslog
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 1695 kB disk space will be freed.
(Reading database ... 11356 files and directories currently installed.)
Removing rsyslog (8.2001.0-1ubuntu1) ...
invoke-rc.d: could not determine current runlevel
 * Stopping enhanced syslogd rsyslogd                                                                                                                                                                                                                                                                                                           [ OK ]
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package gnupg is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'gnupg' has no installation candidate
linux-browser-installer: Error: 'apt install -y gnupg' failed